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[57] ABSTRACT 

Hard, real-time, multi- tasking system is monitored by com- 
bined hardware and software and logic to detect overrun of 
any task beyond a declared maximum processor cycle limit 
for the task. Processor execution cycles utilized by DMA or 
interrupt processing and not related to the task being 
executed are not counted. Counter hardware and control 
logic reduces software overhead for monitoring execution 
cycle utilization by a task and provides capability not only 
of overrun detection, but programmed cycle usage alarm, 
consumed cycle count and overall processor loading or 
utilization measurements to be made. 

8 Claims, 4 Drawing Sheets 
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MONITORING PROCESSOR EXECUTION consumes more processor cycles than allocated, it or some 

CYCLES TO PREVENT TASK OVERRUN IN other program may not have sufficient time or processor 

MULTI-TASK, HARD, REAL-TIME SYSTEM cycles left to meet real-time deadlines. The solution is that, 

in a hard real-time system, actual task processor cycle usage 

CROSS REFERENCE TO RELATED 5 must be allocated and managed and measured correctly. Just 

APPLICATION as robust, non- real -time multi- tasking systems need methods 

m_ • i- * r 1- *• o kt of keeping individual programs within their allocated 

This application is a continuation of application Ser. No. . ■ . , A . , 1 • 

r ,-,„t:s A nrx ci j c -1 n m u j j memory boundaries, a hard real-time multi-tasking system 

07/766,490, filed Sep. 26, 1991, now abandoned. , J <, « ri ' . 4 . *i_ 

r needs a method of keeping the program within the processor 

FIELD OF THE INVENTION 10 usa £ e allocation. Complicating this problem is the fact that 

a given task or program does not necessarily execute in a 
This invention relates to multi-task computer systems in contiguous time block. A particular program's execution 
general and specifically to those which are required to period may be interrupted by a system interrupt handling 
provide task execution results in hard real-time such as tasks routinc or a higher priority program interrupt. To accurately 
encountered in multi-media computer and display systems. 15 insure ^ a task itself docs not exceed its own maximum 
1. Prior Art processor cycle allocation, a mechanism and process have 
A great deal of study has been conducted in the field of been provided which accurately counts only the processor 
scheduling algorithms for hard real-time systems. For cycle used by each individual program. A counter is imple- 
example, reference may be had to Xu et al "Scheduling mented with logic that prevent advancing the counter when 
Processes with Release Times, Deadlines, Precedents and 20 DMA or interrupts occur. A hybrid system in which hard- 
Exclusion Relations" appearing in the IEEE Transactions on ware logic and counters are implemented in the processor 
Software Engineering, Vol. 16, No. 3, March 1990, pages and a management routine having minimum overhead is run 
360-369 or to Rabbie et al "An Operating System for in order to keep track of consumed machine cycles for each 
Real-Time ADA" appearing in the Journal of the ACM task provides the solution. 

1989, Vol. 10, pages 490-498 and to Halang et al "Meth- 25 The cycle counter is a 16-bit count register, such as a 

odologies for Meeting Hard Deadlines in Industrial Distrib- 16-bit decrementing counter, and necessary control logic to 

uted Real-Time Systems" appearing in the IEEE Conference operate the counter in one of three states: the counter itself 

Proceeding in 1989, pages 567-573, to name but a few. may be disabled and stopped or enabled and stopped or 

While this prior art is replete with numerous approaches enabled and running. The logic assures that the cycle counter 

to the scheduling problem which should permit multi-task 30 ma y not directly change from the state of being disabled and 

hard real-time operation to proceed, little or nothing appears stopped to the state of being enabled and running. Thus, 

to have been done to prevent or control "crashes" in which actual counting is controlled by the occurrence of actual 

a given task may overrun its execution time, thereby endan- execution cycles for a task. The software portion of the 

gering other hard real-time tasks that are to be run and mechanism loads the cycle count registers, keeps track of 

resulting in breakdown or failure of the computer system to 35 cycles used and cycles remaining in the case of an interrupt, 

meet the demands of the hard multi-task real-time environ- monitors the decrementing counter to detect overrun and 

men t. manages saving and restoring of the remaining contents in a 

A significant problem is that the program that actually £ unt r f e S ister if a I^ty tuk 01 ^P' °°?>»- 
fails because it did not meet its deadline may not have been „ ^ s ° ftware P re 1 ven J ts an / ^dividual task program from 
the one that exceeded its maximum cycle usage. A latent 40 exceeding its declared and specified maximum cycle count 
problem with a task that has been implemented in a machine consumption during execution. Several register values are 
may not be uncovered until other tasks are loaded, perhaps maintained by me software including a count of the pro- 
years later, and an attempt is made to run them whereupon s aUocated execution cycles that have been 
a breakdown occurs and no-one ever thinks to look at the At "Seated and a count of actual usage whenever the program 
fact that the originally installed program is the source of the 45 has been Pimpled by a higher priority program, 
problem. Additionally, it is possible that failure will only BRIEF DESCRIPTION OF DRAWINGS 
occur when the multi-task system is heavily loaded. The ^ fo j ^ ^ other objecK of ^ mvention ^ 
result is a situation in wkch a program or programs which speciflcally enumerated, have been met in a preferred 
violate the maximum cycle allocation may go undetected SQ embodimen , iacor p 0ra tin g hardware circuitry and logic and 
indefinitely until a new program introduced in the system software monitorin of me state of the lo ^ c and controls 
uses sufficient processor resource to make the problem which m described and mustrated witn reference to 



occur. 



a preferred embodiment as shown in the drawings in which: 

2. Objects of the Invention FIG. 1 illustrates schematically the hardware logic and 

In view of the foregoing known problems and deficiencies 55 decrementing counter for the hardware portion of the pre- 

in the prior art, it is an object of this invention to provide an ferred embodiment. 

improved hardware and software implemented monitoring piQ. 2 illustrates the process flow chart of a preferred 

and control system for use in hard real-time multi-tasking embodiment of the software portion of the invention for the 

computer systems that can accurately detect and limit utili- condition in which another task interrupts operation of a first 

zation of the system by any task or group of tasks. eo task during its execution. 

BRIEF SUMMARY OF INVENTION 3 illustrates the software flow chart for detection and 

management during execution of an overrunning task. 

In order to guarantee system integrity in a hard, real-time 

multi-tasking system, each real-time program task must be DETAILED DESCRIPTION OF PREFERRED 

held to specify, in advance, the maximum number of pro- 65 EMBODIMENT 

cessor cycles that it will use for each program execution. If It is assumed at the outset that familiarity with hard 

any one of the individual programs running in the system real-time processor systems on the part of the person of 
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ordinary skill in this art exists as evidenced by some of the Operation of the logic and hardware in FIG. 1 is such that 

journal papers and references cited above in the prior art the cycle counter 1 cannot directly change from the state of 
section. The invention herein presumes that each task in a being disabled and stopped to the state of being enabled and 
multi- tasking system will be held to the requirement of running. This is because the branch to background and lack 
declaring its own maximum execution cycle count limit that 5 of interrupt conditions must also both be satisfied as stated 
will be required by the task running to completion. The above. Cycle counter register 1, as mentioned previously, 
present invention will accurately count only processor counts execution cycles when it is enabled to run and causes 
cycles used by each individual task or program during its decrementing of the count initially loaded into it from the 
execution and will not count those machine cycles during databus2. The cycle counter is stopped if a read is conducted 
the execution time of a task within which code is not actually 1Q on me reg ister contents of counter 1. Writing a new load to 
being executed. For example, machine cycles stolen for ^ counter register enables but does not start the counter 
DMA or memory refresh purposes or due to interruption of operating . a™ branch of the syste m processor to back- 
the task by a higher priority task to be executed will not be grmmd mode ^ ^ cyde fegister x counting p rovided 
counted. \ - t ^ nQt j ?een disabled by some other condition. And 

The hardware portion of the invention is centered around \ ^ t ri on line 22 will stop the cycle counter 
a 16-bit register and decrementing counter. The hardware *1 disa51in it 

also includes the necessary control logic to operate the , . , , , ( , „ , 

decrementing counter, read and write contents of the 16-bit Provisions enable the hardware to be controlled to 

register, detect overrun conditions and generally operate the I count onl y execution cycles elapsed while a task is actually 
counter in any of three logical states defined as "disabled and \ being executed. When the cycle counter register 1 is enabled 
stopped", "enabled and stopped" or "enabled and running" 20/and running, the count register within it is decremented by 
— Turning to FIG. 1, the initial register contents for counti^^ one 0011111 Wlth each machine execution cycle as strobed 
register 1 are provided over a 16-bit bus 2. Bus 2 is ovqt line 3 by the processor cycle clock, not shown. If the 
bidirectional and is the databus in a typical multi-processor processor is halted for any reason, such as to allow DMA 
system. The register in counter 1 is provided with execution access to the processor's memory, cycle count register 1 is 
clock cycle pulses from the processor circuitry over line 3. 25 not decremented because the processor cycle clock, line 3, 
Normally, each processor execution clock pulse is utilized to does not strobe when the processor is halted. Therefore, only 
decrement the present content of the 16-bit register counter processor cycles in which task code is actually executed are 
1 when the counter is enabled and running. If the counter counted. If a count eventually causes "rollover" from all 
should "roll over" to (hexadecimal) "FFFF" this fact will be zeros to FFFF in hexadecimal, the cycle counter hardware 1, 
detected in decode logic 4 and, in the event that the counter 30 through the decode logic 4 and AND gate 5, will cause an 

1 is enabled and running, and gate 5 will present a cycle interrupt to the execution processor system which is handled 
counter interrupt to the software system portion of the as will be seen in the software portion of the invention. A 
invention as a detection of an error condition, i.e. an overrun transition from 0 to FFFF which is caused by a writing to the 
will have been detected. counting register will not cause an interrupt. 

Operation of the hardware in FIG. 1 includes initially 35 The software portion of the preferred embodiment is 
decoding the counter address appearing on bus 6. This is the shown in FIGS. 2' and 3 and will be described briefly herein, 
address bus in the processor system. Decoding occurs in the i n the embodiment shown, software' register contents for a 
counter address decoder 7 preparatory to loading the con- full 32-bit of cycle count are provided and, since the 
tents of the databus 2 into the register counter 1. When the machine does not implement a 32-bit counter as shown in 
counter's address is found on bus 6, the address decoder 7 40 FIG. 1, the total cycle count is divided into two 16-bit groups 
enables AND gates 8 and 9. This causes, in the presence of with the low order bits and the high order bits each repre- 
a data write strobe on line 10 or a data read strobe on line senting 16 bits. Software registers for "CYCLES L" store the 
11, appropriate enabling to cause loading of the present low 16-bits of the program's or task's maximum allocated 
contents of the databus 2 into register 1 over the line the 12, cycle count and "CYCLESH" contains the highest order 
"enable load count register". This gates the contents of bus 45 16-bits of the program's maximum allocated cycle count. 

2 into register 1. A "read" of the present contents from the "PRESENTH" holds the present high 16-bits of the cycle 
output 13 of the register counter 1 via the bidirectional driver count reached by the counter 1 in FIG. 1. The operation of 
14 gates the contents from register 1 back onto the databus the system is controlled so that when the operating system 
2 during reading as controlled by AND gate 9 and the data for the processor calls a task or program for execution, the 
read strobe 11. 50 content of CYCLESL is copied into the count register 1 and 

Additional logic is incorporated as shown in FIG. 1 to the contents of CYCLESH is copied into the software 
control the state of the register counter 1. Latch 15 is set register for PRESENTH. Therefore the combination of the 
upon writing of data into the counter and energizes the registers in software and hardware, PRESENTH and the 
counter enabled output 16. Output 16 is reset over line 17 in count register 1, hold the maximum number of allocated 
the event of a reading of the count register. If the enabled 55 processor cycles for a given task or program that has been 
output 16 is present, no interrupt is present and any proces- called at this time. While the task executes, count register 1 
sor branch to background state occurs, (the condition nec- is decremented at each execution cycle of the processor. If 
essary to begin execution of a task), AND gate 18 will be the program is preempted by a higher priority task, the 
fully enabled and latch 19 will be set to enable and run current state of the count register 1 is stored away and saved 
counter register 1. If a branch to foreground should occur 60 so that it may be restored when execution of the preempted 
(the opposite of branch to background) latch 18 would be program is again resumed. If the count register 1 should be 
disabled as would be the case if any interrupt or clock halt decremented to rollover from all zeros to FFFF in 
occurred. This, through inverter 20, would disable AND gate hexadecimal, an interrupt condition occurs which transfers 
18 and also reset Latch 19 to stop counter register 1. The program control back to the operating system as a potential 
branch to background control line 21 and the interrupt 65 "error" has been detected in the form of an overrun. The 
control line 22 supply the necessary signals to AND gate 18 operating system will examine the contents of its software 
as shown. register PRESENTH. If the content is not 0, the content of 
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PRESENTH will be decremented by 1 and control returned Boxes 26 and 27. In Box 26, a flag is set in the frame control 

again to the interrupted program with the count register block in the processor's memory to indicate that the instruc- 

again decrementing from FFFR If the cycle counter 1 causes tion cycle counter 1 of FIG. 1 is now active. In Box 27, 

an interrupt and PRESENTH is found to be 0, then the CYCLESL is copied from the task control block in memory 

program will have exceeded its maximum cycle count and 5 into the cycle count register 1 of FIG. 1 and counter 1 is then 

an appropriate error reporting and recovery action can be fully enabled but for a starting signal. The starting signal 

taken. comes in box 28 by executing a branch to background 

Additional functions can be implemented with this same condition which simultaneously allows the occurrence of 

hardware and software which are of great utility in these interrupts, should any occur, and enables AND gate 18 in 

systems. A cycle alarm service can be implemented, for 10 FIG. 1 to enable counting in count register 1. The task code 

example, for use by a given task or program which by its begins execution in box 29 and runs until a hypothetical 

own nature may consume some indeterminate number of interrupt, that may occur periodically from a variety of 

processor cycles. For example, a program might call a purees, .occurs This stops the counter :« -shown in box 30. 

function that uses an iterative process to converge upon a A question is asked in box 31 as to whether another task is 

„i„ - t i„„ ™~oo to be run and if the answer is "yes , the pnority of the task 

desired solution or some other iterative algorithm process 15 d 32 to . f . ( fe £ ^ the task 

Perhaps the iterative process would converge at different ^ executi If n0 other Usk wishes to mn or if the 

rates as a function of its input data. Furthermore, after some interrupting ^sk has a i ower prioriiy than the task which is 

determined number of iterations it may be acceptable to exeC uting, the system proceeds to box 33 to resume the task 

consider whatever solution the algonthm has reached to be wnich was interrupted by branching back to "background", 

close enough to the desired result to take some alternative ^ wae reupon counter 1 will resume operation as shown in box 

action. In any of these cases, a cycle alarm service can be 34 unt ii the task completes in block 35 by returning to the 

implemented by periodically reading the content or by operating system of the processor. A reading of the contents 

presetting the cycle counter 1 to the requested number of of the count register 1 occurs next as conducted by the 

cycles before an alarm is created. A program may have a operating system to. stop and disable the counter and for any 

certain allocation of machine cycles and a requested alarm 25 of the record keeping purposes noted above. This is shown 

condition for a lesser number of cycles, i.e. it might be in block 3 6 and in block 37 where the operating system calls 

determined that having achieved the requisite minimum the next task in, the multi- tasking system for operation., 

number of cycles that a solution of sufficient precision is Returning to block 32,, if the interrupting task does have 

available, A cycle alarm service routine can set the cycle higher priority, processor's 'State is saved and stored in .the 

counter 1 equal to the requested alarm cycle limit and put 30 task's frame control block in memory as shown in block 38. 

any^ remainder of allocated cycles into a reserve location, This involves reading the cycle count from register 1 in FIG. 

thereby enabling a report to the user program of the number 1. This* will result^ disabling the counter as shown in block 

of cycles that it still has in reserve at any time. If the cycle 39 and the counter's contents will' be placed on the databus 

counter 1 should reach 0 before the task completes or 2 for loading into the task's 1 frame control block in memory 

requests additional alarm cycles* the program can be inter- 35 as shown in block 40. Anew task may then be initiated in 

rupted and any. reserve cycles put into the : cycle counter 1 to block 41 following similar 1 steps to" those conducted in 

resume execution. t . blocks 23 through 29.' This new task will run until it is 

A cycle count service can also be implemented to be used interrupted^ ends or overruns and a return to the interrupted 

by a programmer task to inquire howmany processor cycles task is finally directed by the operating system as shown in 

it has left at any given time. This service would simply read 40 block 42. In block 43, the processor's state is restored to its 

the current state of cycle counter 1 and return the informa- state prior to being preempted by the higher priority task, 

tion to the requesting program. The logic in FIG. 1 enables Note: The "active. flag" is used to accommodate tasks which 

reading data from register 1, during which time the counter do not use the cycle counter, for. example, non-real-time 

will be disabled by the logic. tasks do not use the cycle counter, so a means is required to 

A processor usage monitor may also be created utilizing 45 aot enable the counter when restoring an interrupted task. In 
the same system to determine the degree of loading in the block 44, a check is conducted to determine if the cycle 
processor system. If the number of cycles each program or counter was active when the task was preempted. In block 
task uses during each execution period is known, an accurate 45, if the counter was not active, the procedure continues to 
measure of the system processor usage can be easily calcu- jump back to, the task via a branch to background. If the 
lated. To accomplish this, each time a task returns to the 50 counter was active in block 45, block 46 causes writing of 
operating system, the processor usage monitor program can the contents of cycle count register saved in the FCB back 
read the current state of the cycle counter, subtract it from to register 1 and .the counter is enabled and flow continues 
that program's total cycle allocation and determine the to block 33 as shown. . .* 
actual processor usage utilized by- each task. These may be FIG. 2 thus describes the general operation of loading the 
averaged with other task's actual count or usage over time ss counter, interrupting a task during execution, saving the 
to gain an average processor usage figure. contents of the" counter in- the task's frame control block, 
• Returning to the preferred embodiment, in FIG. 2, the initiating a new task and running to completion or to 
process flow begins with Box 23 when a given task is called interruption as ^described; FIG. 3 illustrates the general 
by the processor's operating system to begin execution. This condition, operative- also in FIG. 2, but in which a task runs 
starts the instruction cycle counter and preparation flow in 60 sufficiently to cause the count register to roll over to all F's. 
Box 23. In Box 24, the operating system* is required to copy In FIG. 3, blocks. 23 through 29 are the same as those as 
the "CYCLESH" content from the task's control block and described with -reference to FIG. 2 involved in the start-up 
memory into the PRESENTH field or register in its frame of any task with the loading of cycle count and the initial- 
control block in memory. This is followed by initiating a ization of the' frame control block so these will not be 
branch to foreground in the operating system control of the 65 repeated here.' 

processor as shown in Block 25. This inhibits interrupts In FIG. 3, an executing task with an active cycle counter 

from occurring during critical operations that follow in will eventually cause the content of the cycle counter to roll 
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over as shown in block 47. This will initiate a reading of the branch target being the task's first instruction location. The 

PRESENTH content from the FCB in memory in block 48 task will then begin to execute and counter 1 will decrement 

and a check in block 49 for a zero condition remaining in the by 1 for each execution cycle in which the task is actually 

PRESENTH value. If zero is found, block 50 reports an error executing. Individual cycles that may be stolen from the task 

condition to the operating system indicative of the fact that 5 operation for DMA activities or any other reason will not be 

the task has overrun its allocated maximum number of counted since the counter will be stopped by the stopping of 

machine cycles because all of the counter content 1 has been the processor execution cycle clock which occurs to permit 

decremented and no further counts remain in PRESENTH to such actions. Under normal operation, the counter will 

be utilized. If, however, PRESENTH is not zero, block 51 continue decrementing until it rolls over from all zeros to all 

decrements the PRESENTH count by 1, restores in block 52 1Q p's in hexadecimal. This will cause the instruction cycle 

the new value of PRESENTH to the frame control block, counter interrupt from decode 4 and AND gate 5 as shown 

and moves to block 53 to resume a branch to background to m fig, i. This w ill temporarily stop the count register 1 

restart the counter. Then the task that was operating and f r0 m decrementing and cause program execution to be 

being executed is resumed in block 54 and it either runs to redirected to the instruction cycle counter interrupt handling 

completion, as shown in blocks 35 through 37, or it causes 15 co d e . This code will examine the contents of PRESENTH in 

the register to roll over again, causing a repeat of the flow the FCB as shown in blocks 48 through 53 in FIG. 3. If 

from box 47 through 53 as just described. PRESENTH has been decremented all the way to zero, the 

As a specific example, let us assume that the system task has completely exhausted its allocated count and the 

processor has an instruction cycle execution time of 100 appropriate error handling procedure would be invoked. In 

nanoseconds, equivalent to a processor capable of executing 2 q the present example, PRESENTH holds the value 0001 

10 million instructions per second. Let us further presume hexadecimal, thereby indicating that there are still 65,536 

that a given task has been allocated or has declared that its cycles remaining allocated to the task. Since the value held 

maximum usage will consume 100,000 processor cycles and in PRESENTH is not zero, it will be decremented by one 

that an execution period at which the task requires the (thereby going to all zerq), and control will. be returned to the 

absolute hard results . is. 20 milliseconds. This places a 25 task to be executed. A branch, back, to f the task is accpm- 

demand on .the, processor system, equal to five million plished by a branch to background, .which will restart .the 

instructions. per, second. It may be. seen that the task lies count register; ,k> ; resume. decrementing from all F... it . t 

within the capability of the processor system.; . in the case:of.an interrupt, we may;suppose that the first 

The task control block, TGB, far (the task will contain, task is executing and ■ that the interrupt as shown inFJG. 1 

among other things, that task's declared cycle count alloca- 30 stops the count -.register l\from decrementing while control 

tion of 100,000 machine execution cycles, plus two. The two is redirected to\the. particular interrupt code - handling seg- 

additibnal cycles are necessary to permit the processor to ment. We may . suppose also that the- interrupt code deter- 

stop the cycle counter when the task returns to the operating mines that another higher priority task needs to run as shown 

system. The count as implemented above is actually a 32-bit in blocks 31 through 46in<FIG.* 2. In this case, the contents 

count with' the upper and lower 16 bits being held in 35 of the count .register 1* will- be ' moved -to the SCYGLCNT 

locations referred to as CYCLESH and CYCLESL, respec- location in theFCB as shown in block 40 of FIG. 2. The 

tively. The frame control block, FCB, for the task with the combination of PRESENTH and SCYGLCNT now together 

20 millisecond execution period demand contains, among hold the current 32-bit count- value and the higher priority 

other things, locations in memory where the upper and lower task can then be called by the operating system. When the 

16 bits of the 32-bit count will be stored. The locations are 40 higher priority task has run to completion, or interruption by 

referred to as PRESENTH and SCYCLCNT, respectively. a still higher priority task, etc., it will be time to resume 

Given these assumptions, the instruction cycle counter in either the interrupt task or a higher priority task. Assuming 

FIG. 1 operates in the following manner in conjunction with that one is returning to an interrupted task due to completion 

the software shown in FIGS. 2 and/or 3. In preparation for of the higher priority interrupting task, the return to the 

calling a task, the operating system executes steps 23 45 interrupted task is. accomplished as shown. A branch back to 

through 29 in FIG. 2 or 3 in which it copies CYCLESH from the task which was interrupted causes the counting register 

the TCB into the location of PRESENTH specified in the to resume decrementing as the branch to background enables 

FCB. It inhibits any interrupts by entering "foreground" counting to resume. Count register 1 will continue decre- 

mode in the processor so that the cycle counter 1 can be set menting until the task returns, to the O.S. and the O.S. 

up and the task can begin without interruption from any 50 performs a read of, the counting register. This both .stops and 

other tasks or sources. It sets a flag .in the FCB to indicate disables the register. At this point, the combination of, the 

that the cycle counter is then active and monitoring opera- contents of PRESENTH and the count register 1 holds the 

tion or execution of the task. Finally it copies CYCLESL number of cycles remaining from that task's declared maxi- 

from the TCB into the count register 1. mum cycle count. If desired, as stated previously. above, the 

At this point, the hardware in FIG. 1 is enabled, but the 55 actual number. of cycles used by the task could be calculated 

counter will not be running. The counter 1 will not be by subtracting any remaining cycles from the task- s declared 

decrementing because the branch to background has not yet maximum count. ■ \ v 

occurred. The PRESENTH location in memory holds the The utilization of - the hardware circuit in FIG. 1 in 

value 0001 in hexadecimal and the count register 1 will hold conjunction with' the software routines of FIGS. 2 and 3 

the value 86A2 in hexadecimal. That is, taken together, the 60 drastically reduces the overhead that would be placed upon 

contents of PRESENTH and the contents of the count the operating system and processor in order to implement all 

register 1 together hold 32-bit hexadecimal representation of the counting and logic functions in a monitoring program, 

for the total allocation of 100,002 cycles. The counter will Furthermore, since any monitoring program implementing 

begin decrementing when the interrupt protection, the all of these functions would require a number of machine 

branch to foreground, is dropped and the task is called to 65 cycles to be run after each and every task execution, the 

execute. To do this, the operating system executes a branch overhead would be prohibitive. The inclusion of the hard- 

to the background mode within the processor with the ware in addition to the minimal software routine which is 
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only invoked at interrupts, etc. is a unique solution. With 
suitable control logic as shown, this solution permits truly 
accurate measuring of utilization of a task during its actual 
execution only. The problem of overruns in multi-tasking 
systems of any sort is a significant one. The theoretical 5 
solutions today are approximate only because the mecha- 
nism of the present invention has not been available. The 
invention is independent of the specific operating system or 
processor family, and while it may be utilized to great 
advantage in multi-tasking hard, real-time environments 10 
such as those occurring in signal processors in multi-media 
applications, it is also equally applicable to mainframe 
computer operating systems in multi-task mode and to a 
variety of smaller systems as well whenever accurate mea- 
suring of processor utilization, detection of task overrun, etc. 15 
is desired. Therefore, while the invention has been described 
above with reference to a preferred embodiment thereof, 
what is desired to be protected by letters patent and what is 
set forth in the claims is indicated by way of example only 
and not of limitation, wherefore what is claimed is: 20 
What is claimed is: 

1. In a multi-tasking program execution system, a method 
of monitoring task overrun conditions, the method compris- 
ing the steps of: 

counting only processor execution cycles associated with 25 
a specific task occurring while said specific task is 
executed, said specific task being executed together 
with one or more other tasks by a single processor; and 

generating a cycle counter interrupt which is one type of 
processor execution interrupt whenever said counting 
reaches a predetermined value; and 

stopping said counting whenever any processor execution 
interrupt occurs. 

2. A method as described in claim 1 ? further comprising: 35 
resuming saidcounting whenever, a processor resumption 

..of execution of , said specific task occurs because said 
counting was stopped for a processor execution inter- 
rupt other than a cycle counter interrupt which is one 
type of processor execution interrupt. 40 

3. A method as described in claim 1 or claim 2, further 
comprising the steps of: 

examining said processor execution interrupt to determine 
whether it is for one of said one or more other tasks 
which has a priority which is higher than the priority of 45 
said specific task; and 

storing the count reached in said counting if said proces- 
sor execution interrupt is for one of said one or more 
other tasks which has apriority which is higher than the 
priority of said specific task; and 50 

resuming said counting if said processor execution inter- 
rupt is not for one of said one or more other tasks which 
has a priority which is higher than the priority of said 
specific task, 

4. A method as described in claim 1 or claim 2, further 55 
comprising the steps of: 

establishing for each specific task a processor execution 
cycle count limit; 

comparing said processor execution cycle count limit to a 6 o 
count obtained and stored in a counter while counting 
said processor execution cycles associated with said 
specific task occurring while said task is executed; and 

if said processor execution cycle count limit has not been 
reached, continuing said counting but terminating 65 
execution of said specific task if said processor execu- 
tion cycle count limit has been reached. 
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5. In a multi-tasking program execution system, a method 
of monitoring and controlling task execution cycle overrun, 
comprising the steps of: 

establishing a processor cycle count limit for each specific 

task to be executed; 
enabling a counter and writing said cycle count limit into 

said counter; 

counting processor execution cycles associated with a 
specific task while said specific task is being executed 
in a single processor, said specific task being executed 
together with one or more other tasks by said single 
processor; 

disabling said counter, stopping said counting, and gen- 
erating a cycle counter interrupt which is one type of 
processor execution interrupt whenever said processor 
cycle count limit is read from said counter indicating 
said processor cycle count limit has been reached; 

stopping said counting but not disabling said counter 
whenever said execution system receives a processor 
execution interrupt which is not a cycle counter inter- 
rupt; and 

starting said counting whenever said execution system 
begins execution of said specific task. 

6. Apparatus for detecting task execution cycle overrun in 
a multi-tasking processor, system, comprising: 

counting means for counting processor execution cycles 
associated with a specific: task, said specific task being 
executed together with one or more other tasks by a 
single, processor; logic means connected to said count- 
ing means to v cpntrol,said counting means said logic 
means cqmprising: , . . . . 

means for .enabling said counting means; ( 
means for. disabling said counting means when a cycle 

counter ; interrupt which is one type of processor 

execution interrupt occurs; 
means for starting said counting means whenever said 

multi- tasking processor system begins execution of 

said specific task and said counting means is not 

disabled; and 

means for' stopping said counting means but not dis- 
abling said counting means whenever a processor 
execution interrupt which is not a cycle counter 
interrupt occurs. 

7. Apparatus as described in claim 6, further comprising: 
means for generating said cycle counter interrupt when- 
ever said counting means reaches, a predetermined 
value. - . 

8. Apparatus for, monitoring execution task overrun con- 
ditions in a multi-tasking program execution system, the 
apparatus comprising: 

means for counting only processor execution cycles asso- 
ciated with a specific task occurring while said specific 
task is executed, said specific task being executed 
together with one or more other tasks by a single 
processor; 

means for generating a cycle counter interrupt which is 
one type of processor execution interrupt whenever 
said counting means reaches a predetermined value; 
and ; 

means for stopping said counting means whenever any 
processor execution interrupt occurs. 

* * * * * 
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